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-- The MAILING DA TE of this communication appears on the cover sheet with the correspondence address « 
Period for Reply 



A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 
WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1.136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (8) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 1 33). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1 .704(b). 

Status 

1)^ Responsive to communication(s) filed on 29 March 2007 . 
2a)D This action Is FINAL. 2b)l3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1 . 453 O.G. 213. 

Disposition of Clainns 

4) S Claim(s) 1-7.10-14,16-21.23.24.26-31 and 33 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6M Claim(s) 1-7.10-1 4.1 6-21. 23.24.26-31 and 33 is/are rejected. 
?)□ Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) 0 The specification is objected to by the Examiner. 

10)0 The drawing(s) filed on is/are: 3)0 accepted or b)n objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1.121(d). 
1 !)□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)0 Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19{a)-{d) or (f). 
a)n All b)n Some * c)^ None of: 

1 .□ Certified copies of the priority documents have been received. 

2. n Certified copies of the priority documents have been received in Application No. . 

3. n Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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3) □ Information Disclosure Statement(s) (PTO/SB/08) 5) □ Notice of Informal Patent Application 

Paper No(s)/Mail Date . 6) □ Other: . 
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DETAILED ACTION 

1. This Office action is responsive to the following communication: Request for Continued 
Examination filed on 29 March 2007. 

2. Claims 1-7, 10-14, 16-21, 23-24, 26-31 and 33 are pending. Claims 1, 16, and 26 are in 
independent form. 

Continued Examination Under 37 CFR 1.114 

3. A request for continued examination under 37 CFR 1.114, including the fee set forth in 37 CFR 
1.17(e), was filed in this application after final rejection. Since this application is eligible for continued 
examination under 37 CFR 1.114, and the fee set forth in 37 CFR 1.17(e) has been timely paid, the 
finality of the previous Office action has been withdrawn pursuant to 37 CFR 1.114. Applicant's 
submission filed on 29 March 2007 has been entered. 

Response to Amendment 

4. Claims 1, 16, and 26 have been amended. 

5. No new claims have been added. 

6. Claims 8-9, 15, 22, 25, and 32 have been cancelled. 

Claim Rejections - 35 USC§ 102 

7. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the basis 
for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described In a printed publication in this or a foreign country or in public use 
or on sale in this country, more than one year prior to the date of application for patent In the United States. 



Application/Control Number: 10/820,576 
Art Unit: 2161 



Page 3 



8. Claims 1-7, 10, 12-13, 15-21, 23, 25-31, and 33-34 are rejected under 35 U.S.C. 102(b) as 
being anticipated by Joshi et al (USPGPUB No. 2002/0091798, hereinafter referred to as JOSHI), filed on 
26 February 2001, and published on 11 July 2002. 

9. As per independent claims 1, 16 and 26, JOSHI teaches: 

A system for sharing confidential semiconductor manufacturing information comprising: 

an access monitor module for authorizing user access to confidential information {See 
JOSHI, [0196], wherein this reads over "Access Server authentication module 540 then authenticates 
the user using the userlD and password"}; 

an information sharing module for creating a transitory link to the confidential 
information in response to a user being authorized to access the confidential 
information {See JOSHI, [0124], wherein this reads over "[a]uthorization event handler 516 
performs steps in a method for determining whether a user of browser 12 or 14 is authorized to 
access a requested resource upon a successful authentication or receipt of a valid authentication 
cookie'7 Stored in a database; and 

a transitory link maintenance module for maintaining the transitory link and 
selectively removing the transitory link from the system {See joshi, [0i48], wherein 
this reads over "[o]nce authenticated, a user can explicitly log out, causing authentication cookies 
cached (or othenwise stored) by the user's browser to be destroyed or become invalid'7; 

wherein the transitory link is a symbolic link {See JOSHi, [0080], wherein this reads over "[a] 
resource can include a web page, software application, file, database"; [0081], wherein this reads 
over "the resource name includes a host name, a file name" and ''[t]he file name is the path name to 
the file on the machine"; [0147], wherein this reads over "an encrypted authentication cookie'7. 

10. As per dependent claim 2, JOSHI teaches: 

The system of claim 1 wherein the access monitor module monitors user idle time and 
may grant access to the system upon verifying user authorization to access the 
system {See JOSHI, [0209], wherein this reads over "[i]f the time elapsed since the session start time 
exceeds a maximum session time, the cookie will become invalid. Idle start time is also stored, which 
identifies the time when the previous HTTP request for a protected resource was made in which cookie 
was passed. If the time elapsed since the Idle start time exceeds a maximum Idle time, the cookie will 
become invalid'7. 

11. As per dependent claims 3, 17 and 27, JOSHI teaches: 

The system of claim 2 wherein the access monitor module denies user access to the 
system if the user idle time exceeds an allowable time limit {See joshi, [0148], wherein 
this reads over "[a]uthentication cookies can also be set by an administrator to be destroyed after a 
maximum idle time has elapsed between requests to resources protected In accordance with the present 
invention"}. 

12. As per dependent claims 4, 18 and 28, JOSHI teaches: 

The system of claim 1 wherein the information sharing module determines whether the 
confidential information is information the user is authorized to access and, in 
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response to the confidential information being information the user is authorized to 
access, the information sharing module creating the transitory link {See joshi, [Oisi], 
wherein this reads over ''the method attempts to determine whether the user is authorized to access the 
requested resource. If the user is authorized (step 790), the method proceeds to step 792 .. . [where] 
the successful authorization of the user is logged in step 792, authorization success actions are performed 
In step 794, and the user is granted access to the requested resource In step 795"}. 

13. As per dependent claims 5, 19 and 29, JOSHI teaches: 

The system of claim 1 further comprising: a user privilege file, whereby the information 
sharing module creates the transitory link when the confidential information 
corresponds to information contained in the user privilege file {See joshi, [0151], wherein 
this reads over *the method attempts to determine whether the user Is authorized to access the requested 
resource. If the user Is authorized (step 790), the method proceeds to step 792 .. . [where] the 
successful authorization of the user Is logged in step 792, authorization success actions are performed in 
step 794, and the user is granted access to the requested resource in step 795"; and [0153], wherein this 
reads over "if a successful mapping has occurred (step 838), then Access Server 34 retrieves the 
authentication rule (step 844) and audit rule (step 846) assodated with the requested resource"}. 

14. As per dependent claims 6, 20 and 30, JOSHI teaches: 

The system of claim 1 wherein the access monitor module uses cookies to authorize 
access to the confidential information {See joshi, [0124], wherein this reads over 
"[a]uthorization even handler 516 peri'orms steps in a method for determining whether a user of browser 
12 or 14 Is authorized to access a requested resource upon a successful authentication or receipt of a valid 
authentication cookie"}. 

15. As per dependent claim 7, 21 and 31, JOSHI teaches: 

The system of claim 1 further comprising: 

an information list and request link disconnected from the confidential information, 
whereby upon creation of the transitory link, the information list and request link 
is connected to the confidential information through the transitory link to allow 
for accessing of the confidential information {See joshi, [Oisi], wherein this reads over 
"the method attempts to determine whether the user is authorized to access the requested resource. 
If the user is authorized (step 790), the method proceeds to step 792 , [where] the successful 
authorization of the user is logged in step 792, authorization success actions are performed In step 
794, and the user is granted access to the requested resource In step 795'7. 

16. As per dependent claims 10, JOSHI teaches: 

The system of claim 1 wherein the transitory link maintenance module removes the 
transitory link when the system indicates that the confidential information is no 
longer authorized to be accessed {See joshi, [0151], wherein this reads over "Otherwise, the 
unsuccessful authorization is logged in step 796. After step 796, the method performs authorization failure 
actions (step 798) and Web Gate 28 denies the user access to the requested resource"}. 

17. As per dependent claim 12, JOSHI teaches: 

The system of claim 1 further comprising: a network coupled to the system {See joshi, 
[0011], wherein this reads over "an access system that provides data to resources available on a 
networic"; and [0080], wherein this reads over "a resource is anything accessible to a user on a networic. 
the networic could be the Internet, a LAN, a WAN, or any other type of networic'7. 
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18. As per dependent claim 13, JOSHI teaches: 

The system of cljaim 1 further comprising: a database coupled to the system {See joshi, 
[0080], wherein this reads over ''[a] resource can include a web page, software application, file, 

database"}. 

19. As per dependent claim 15, 25 and 34, JOSHI teaches: 

The system of claim 1 wherein the transitory link Is a symbolic link {See joshi, [0226], 
wherein this reads over "the resource determines whether there are any header variables to consider. If 
there are no header variables, then in step 1834, the resource responds to the request. Responding to the 
request can Include providing a web page, access to a software process or anything else appropriate for 
the particular resource. If, in step 1832, it is determined that there are header variables, then In step 1836 
the resource searches for a particular variable name. In order to use header variables, the resource must 
be preprogrammed to know what header variables to expect and how to use them."}. 

20. As per dependent claims 23 and 33, JOSHI teaches: 

The method of claim 12 wherein the removing is performed after the confidential 
information has been accessed through the transitory link {See joshi, [0148], wherein this 
reads over "[a]uthentication cookies can also be set by an administrator to be destroyed after a maximum 
idle time has elapsed between requests to resources protected in accordance with the present Invention'^. 



Claim Rejections - 35 USC §103 

21. The following Is a quotation of 35 U.S.C. 103(a) which forms the basis for all obviousness 

rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to a 
person having ordinary skill In the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

22. Claims 11, 14 and 24 are rejected under 35 U.S.C. 103(a) as being unpatentable over JOSHI, 
in view of Official Notice. 

23. As per dependent claims 11 and 24, JOSHI, in combination with Official Notice, discloses a 
system wherein the system exists within a virtual integrated circuit fabrication system since it would have 
been obvious to one of ordinary skill in the art at the time the invention was made to include an access 
authentication system to protect confidential integrated circuit fabrication information. 

24. As per dependent claim 14, JOSHI, in combination with Official Notice, discloses a system 
wherein the access monitor module, the information sharing module, and the transitory link maintenance 
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module are all written in the common gateway interface (CGI) since it would have been obvious to one of 
ordinary skill in the art at the time the invention was made to use CGI, a well-known programming 
method, for writing modules of the claimed system. 

Response to Arguments 

25. Applicant's arguments filed 18 December 2006 have been fully considered but they are not 
persuasive. 

a. Applicant's Arguments: 

i. Rejections under 35 U.S.C. 102 

Applicant asserts the argument that Joshi fails to teach the claim limitation of 
"wherein the transitory link is a symbolic link" (See Amendment, page 7). 

ii. Rejections under 35 U.S.C. 103 

Applicant asserts the argument that the dependent ''claims are allowable over 
the cited referenced for at least the same reasons set forth" with reference to claims 1 
and 16 (See Amendment, page 8). 

b. Response to Arguments: 

iii. Rejections under 35 U.S.C. 102 

As per Applicant's assertion that Joshi fails to teach the claim limitation of 
''wherein the transitory link is a symbolic link," the Examiner respectfully disagrees. It is 
noted that [0080]-[0081] of Joshi disclose a system wherein resources such as a 
database, specifically the files on said database, are provided a file name which is the 
path name to the file on the machine. Furthermore, it is noted that the encrypted 
authentication cookies, as disclosed by Joshi, are associated with a URL policy, such that 
the cookies act as indirect pointers to the requested file. Accordingly, the disclosure by 
Joshi sufficiently reads upon the invention as claimed and recited in both claims 1, 16 
and 26. 
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Accordingly, the claim rejections under 35 U.S.C. 102 are sustained, 
iv. Rejections under 35 U.S.C. 103 

As per claims 11, 14, and 24, Applicant has not asserted any specific arguments 
in response to the rejections of the claims. Therefore, the rejections of claims 11, 14 
and 24 are sustained because Applicant has not presented any prior art arguments for 
overcoming the rejections contained in the prior Office Action. Furthermore, by virtue of 
dependency, the rejections of Claims 11, 14, and 24 are sustained for the reasons stated 
above in relation to Claims 1 and 16. 



Conclusion 

26. Any inquiry concerning this communication or earlier communications from the examiner should 
be directed to Paul Kim whose telephone number is (571) 272-2737. The examiner can normally be 
reached on l^-F, 9am - 5pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, Apu 
l^ofiz can be reached on (571) 272-4080. The fax phone number for the organization where this 
application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) at 
866-217-9197 (toll-free). If you would like assistance from a USPTO Customer Service Representative or 
access to the automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 




Paul Kim 

Patent Examiner, Art Unit 2161 
TECH Center 2100 



